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FEDERAL BUREAU OF INVESTIGATION 


On November 23, 1998, 
Academic Computing Facility, New York University (NYU), 251 
Mercer Street, New York, New York 10012; telephone number 

and 
Academic Computing Facility, NYU, 251 Mercer Street, New York, 
New York 10012; telephone number [__——C] were interviewee 
at their place of employment. After being advised of the 
identity of the interviewing Agents, [_Jand 
provided the following information. 


[became aware of the ELECTRONIC DISTURBANCE 
THEATER’s (EDT) web page at the beginning of September 1998 after 
the Department of Defense(DOD) contacted NYU_and told them the 
page was resident on their computer system. visited the 
EDT web page and determined that the hostile applet was not 
resident on NYU’s computer system. NYU has a software tool that 
can detect hostile program language such as a Java script applet. 


The EDT web page contained advocacy language, Ph.D., and protect 


information. As a result of being contacted by the DOD, 
monitored all traffic between the EDT site and the targeted 
Mexican sites. He did not observe much traffic between the two 
sites. 


also looked at the FloodNet page and felt that 

it was a “silly and naive way of doing things.” The FloodNet 
program appeared to be reloading pages; however, if it was a well 
coordinated attack, such a program could cripple a system. He 
also felt that there were far reaching ramifications of such a 

rogram. As a result, the Academic Computing Facility contacted 
es Ot told him it was in his best interest not to have 
such inflammatory language on the NYU system. [__]was initially 
contacted via E-mail because he was out of the country until that 


Monday. Within one week of receiving the message from the DOD, 

spoke with Consequently, removed the 
advocacy language from the EDT web page. never denied that 
the EDT web page was_his. ee establish that the 


account belongs to[ | NYU never turned[___ account off. 
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[remembers that there was minimal follow up 
conversation between [____Jand himself. The first_contact with 
Se by E-mail. The only in-person_contact Ea with 

was regarding technical problems [_Jwas having with his b6 
SendMail program. These technical problems were not related to b7C 
the EDT web page. The Dean of the School of Education was 
another person who had in-person contact with [] as he had met 
with him regarding the removal the EDT web page from NYU’s 
computer system. 


from the DOD con NYU for a second 
time on approximately September 10, 1998. sent what NYU 
interpreted as a letter requesting that a “tape freeze” be b6 
effected on the[___Jaccount. b6é RiGee BEES. 
b7C ; 
As a result, NYU electronically recorded the contents 
of [| computer account and computer logs related to it from 
September 1, 1998 through September 10, 1998. [L__Jhome 
directory, all of its contents, new and old E-mail, the entire — 
web site as well as copies of multiple versions as it_was 
subsequently modified, access logs and logs showing 
accessing his site have been saved to a tape that has been placed 
in a secure location at the Academic Computing Facility. NYU 
will provide the tape to the FBI upon production of proper 
documentation. 
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Sox i2t\2alAF +ohl St 
Subject: What we discussed today : 
Date: Tue, 22 Dec 98 17:55:39 EST 4053 7962 8527 


From: Zip disk. wl Wis a - 
To: PERSE USL INES 


MNALED TO. 


b6 
ui,{[ as requested, here's my e-mail address (below). I just got b7c 
back in the office (5:00 pm), and received a fax from[_—S—=——_—i| (his 
initial case initiation) regarding what we spoke about. I will be reviewing b6 
it asap. [_] advised me he will be transferring the case to me as soon as he b7C per DTIC 
is able. 


He also advised me that he sent you those other items; and that he probably 
would not be able to duplicate a copy to me (he returned the equipment he 
borrowed; and is leaving DCIS next week for Postal IG). If you could fedex a 
copy to me; or e-mail, would be greatly appreciated. I'll need to get it by 
12/24 at the office; or next week at home (see below). 


As I mentioned, I will be on leave next week, and then at FLETC Georgia for 'F) 
Computer Intrusion training the next two weeks; so I won't be back in the : 
office until January 19th. However, this seems extremely interesting, and I hil omm,, 


would like to get up to speed asap. Also, I will be bringing the items with 
me to Georgia, to review with my HQ OC eens who is b6 
giving the training). b7C per DTIC 


So, I have also listed below my home address and phone number; my pager 
number; and my ECTF cell. phone number. Please do not hesitate to contact me 
at any time (at home, etc.), if anything breaks, or I can be of any 
assistance. I will also try to check voicemail when possible. 


Thank you, and happy holidays and new year! 


(EXTERNAL / INTERNET) b6 
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b6 

To: b7C 
From; b6 
Certify: Y b7C per DTIC 
Subject: What we discussed today 
Date: Tuesday, December 22, 1998 at 5:55:39 pm EST b6 
Attached: None b7c 
fe as requested, here's my e-mail address (below). 1 just got back in the office 
(5:00 pm), and received a fax from his initial case initiation) regarding what b6 
we spoke about. I will be reviewing It asap. advised me he will be transferring the 

b7C per DTIC 


case to me as soon as he is able. 


He also advised me that he sent you those other items; and that he probably would not be able 
to duplicate a copy to me (he returned the equipment he borrowed; and is leaving DCIS next 
week for Postal 1G). If you could fedex a copy to me? or e-mail, would be greatly 
appreciated. I'll need to get it by 12/24 at the office; or next week at home (see below). 


As I mentioned, I will be on leave next week, and then at FLETC Georgia for Computer i 
Intrusion training the next two weeks; so I won't be back in the office until January 19rh. 

However, this seems extremely interesting, and I would like to get up to spea B 

will be bringing the items with me to Georgia, to review with my HO personnel : b6 

group, who is giving the training) . b7C per DTIC 


So, I have also listed below my home address and phone number; my pager number; and my ECTF 
cell. phone number. Please do not hesitate to contact me at any time (at home, etc.}, if 
anything breaks, or I can be of any assistance. IX will also try to check voicemail when 


possible, ' 
eG i b6 


Thank you, and happy holidays and new year! : b7Cc 
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b6 

To: b7c 

From: : b6 

Certify: Y b7C per DTIc 
“ Subject: e-mail address : bé 

Date: Tuesday, December 22, 1998 at 6:11:57 pm EST 

Attached: None , b7C 

HL again,[ id - I think they changed my e-mail address to: : 

b6 


[ bIC per DTIC 


just found out - so, if you need to send me e-mail, please try both, until I get this 
straightened out. Thanks again. 


[| 


e-mail address 


Subject: e-mail address 


Date: Tue, 22 Dec 98 18:11:57 EST 
From: 
To: 


Hi again,| | - I think they changed my e-mail address to: 


_ 


just found out - so, if you need to send me e-mail, please try both, until I 
get this straightened out. Thanks again. 
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